JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.132.186.196

66.132.186.196 was found in our database!

This IP was reported 2,308 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398324
Hostname(s)	196.186.132.66.censys-scanner.com
Domain Name	censys.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.132.186.196

Whois 66.132.186.196

IP Abuse Reports for 66.132.186.196:

This IP address has been reported a total of 2,308 times from 482 distinct sources. 66.132.186.196 was first reported on March 22nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mccsoft.io	2026-06-28 22:11:52 (1 hour ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-28 22:11:32 (1 hour ago)	Honeypot hit: Empty payload (likely service probe); 40672 [1] TCP	Port Scan
🇫🇷 mouafiq	2026-06-28 21:55:37 (1 hour ago)	2026-06-28 21:52:28,755 24518 INFO ? werkzeug: 66.132.186.196 - - [28/Jun/2026 21:52:28] "GET /favic ... show more 2026-06-28 21:52:28,755 24518 INFO ? werkzeug: 66.132.186.196 - - [28/Jun/2026 21:52:28] "GET /favicon.ico HTTP/1.0" 404 - 1 0.002 0.006 2026-06-28 21:52:43,494 24518 INFO ? werkzeug: 66.132.186.196 - - [28/Jun/2026 21:52:43] "GET /favicon.ico HTTP/1.0" 404 - 1 0.002 0.010 2026-06-28 21:52:44,052 24518 INFO ? werkzeug: 66.132.186.196 - - [28/Jun/2026 21:52:44] "GET /favicon.ico HTTP/1.0" 404 - 1 0.002 0.006 2026-06-28 21:55:35,528 24518 INFO ? werkzeug: 66.132.186.196 - - [28/Jun/2026 21:55:35] "GET /security.txt HTTP/1.0" 404 - 1 0.002 0.004 2026-06-28 21:55:36,722 4381 INFO ? werkzeug: 66.132.186.196 - - [28/Jun/2026 21:55:36] "GET /security.txt HTTP/1.0" 404 - 1 0.002 0.005 show less	Brute-Force SSH
🇩🇪 hbrks	2026-06-28 19:54:43 (3 hours ago)	4 attack(s) detected, such as these: {"event":"web_block","ip":"66.132.186.196","host":"152.53.100.1 ... show more 4 attack(s) detected, such as these: {"event":"web_block","ip":"66.132.186.196","host":"152.53.100.117","request":"GET /wiki HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-28T19:54:43 00:00","logentry":"152.53.100.117 66.132.186.196 - - [28/Jun/2026:19:54:43 0000] \"GET /wiki HTTP/1.1\" 503 190 \"-\" \"Mozilla/5.0 (compatible; CensysInspect/1.1; https://about.censys.io/)\" \"-\""} * Report Details : https://p4u.xyz/DY5PHVOKN1O/1 IP Details *: https://p4u.xyz/DY5PHVOKN1O/2 show less	Web Spam Hacking Bad Web Bot
🇺🇸 thororen	2026-06-28 19:27:05 (4 hours ago)	Blocked by UFW [2024/tcp] Source port: 57530 TTL: 56 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [2024/tcp] Source port: 57530 TTL: 56 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sonot	2026-06-28 19:26:52 (4 hours ago)	Blocked by UFW on tunneluk01 [8443/tcp] \| SPT: 5686 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: g ... show more Blocked by UFW on tunneluk01 [8443/tcp] \| SPT: 5686 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 sbajic	2026-06-28 19:22:15 (4 hours ago)	...	Brute-Force
Anonymous	2026-06-28 17:56:19 (5 hours ago)	2026-06-28T18:56:18.129815+01:00 vps kernel: [44409520.225629] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-28T18:56:18.129815+01:00 vps kernel: [44409520.225629] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=66.132.186.196 DST=54.37.14.118 LEN=60 TOS=0x08 PREC=0x40 TTL=44 ID=42093 DF PROTO=TCP SPT=64688 DPT=5090 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-06-28 17:56:10 (5 hours ago)	Shorewall log file match.	Port Scan
🇩🇪 Admins@FBN	2026-06-28 17:25:50 (6 hours ago)	FW-PortScan: Traffic Blocked srcport=11440 dstport=1701	Port Scan
🇩🇪 ITSNF	2026-06-28 17:25:02 (6 hours ago)	Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=3000	Port Scan Hacking
🇫🇷 adnscom.net	2026-06-28 15:39:50 (8 hours ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇫🇷 Guardian	2026-06-28 12:35:18 (11 hours ago)	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇩🇪 ITSNF	2026-06-28 10:05:06 (13 hours ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=8096	Port Scan Hacking
🇺🇸 sandra361	2026-06-28 08:59:44 (14 hours ago)	Port scan detected: 14 attempts across 1 ports (30183). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=66. ... show more Port scan detected: 14 attempts across 1 ports (30183). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=66.132.186.196 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=18619 DF PROTO=TCP SPT=49664 DPT=30183 WINDOW=21900 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 15 of 2308 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.134

🇦🇷 181.85.83.46

🇸🇦 172.69.125.216

🇺🇸 147.185.132.18

🇸🇬 128.199.225.7

🇹🇼 128.14.226.125

🇮🇹 93.65.3.162

🇩🇪 88.214.25.123

🇫🇮 31.56.204.231

🇮🇩 103.180.165.82

🇺🇸 91.193.232.25

🇮🇶 65.20.250.244

🇳🇱 45.148.10.151

🇺🇸 34.71.125.79

🇨🇳 183.225.47.29

🇺🇸 128.2.204.28

🇭🇰 43.224.248.40

🇿🇦 41.181.156.205

🇬🇧 35.203.210.75

🇺🇸 2.25.186.236